About this Statement

This statement sets out the steps that Orca Security Ltd. and its subsidiaries (together, “Orca Security”, “we” or “our”) have taken during the twelve months before the date on which it was approved (the “Reporting Period”) to identify, assess and address the risk of modern slavery and human trafficking in our own operations and in our supply chains.

We publish this statement voluntarily, having regard to section 54 of the UK Modern Slavery Act 2015 and the Australian Modern Slavery Act 2018 (Cth).

This is the first modern slavery statement published by Orca Security.

In this statement, “modern slavery” refers to slavery, servitude, forced or compulsory labour, human trafficking, debt bondage, deceptive recruitment for labour or services, and the worst forms of child labour.

We do not tolerate modern slavery in any part of our business, and we expect the same of those we work with.

Entities Covered

This statement covers the following entities:

● Orca Security Ltd. (Israel), the parent company of the group;

● Orca Security UK Ltd (United Kingdom);

● Orca Security, Inc. (United States);

● Orca Security Australia Pty Ltd (Australia); and

● Orca Security Global Private Limited (India).

Each of these subsidiaries is owned and controlled by Orca Security Ltd., and our group policies and processes apply to all of them. This statement was prepared by our Legal and Compliance function in consultation with the management of each entity and with our Finance, IT, procurement and workplace teams, who provided information on their operations, suppliers and practices.

Our Structure and Business

Orca Security is a cloud security company headquartered in Israel. We provide a cloud security platform, delivered as software as a service, which helps organisations identify and prioritise security risks across their cloud environments. Our customers are businesses and organisations around the world.

Our employees are located mainly in Israel, the United States, the United Kingdom, Australia and India. Our workforce consists mainly of salaried professionals working in research and development, sales, marketing, customer success, professional services and general and administrative functions. Where we do not have a local entity, some individuals are employed by an employer of record provider and work on our behalf. We also engage independent contractors and, through staff augmentation providers, external development personnel.

Our Supply Chains

Our supply chains support the delivery of an online software service rather than the production of physical goods. Our main categories of spend are:

● Cloud infrastructure. Our platform runs on major public cloud providers. We do not own or operate data centres, but the servers, networking equipment and components used by these providers form part of our extended supply chain.

● Hardware. Laptops, mobile devices and peripherals for our workforce.

● Software and IT services. Software tools and IT services used across our business.

● Labour providers. Recruitment agencies, employer of record providers, staff augmentation providers and individual contractors.

● Professional services. Legal, accounting, audit, tax, insurance and consulting services.

● Marketing and events. Agencies, event organisers and venues, and branded merchandise.

● Facilities and travel. Office premises and office services, and travel and accommodation.

Governance and Responsibility

Our Legal function, led by our Head of Legal and with the assistance of the Compliance department, is responsible for preparing this statement and for coordinating our approach, working with our Finance and Procurement, IT and workplace teams. Significant concerns are escalated to executive management and, where appropriate, to the Board.

Our Policies

Our approach is set out in, and supported by, the following policies and practices:

● Code of Conduct and Ethics, which applies to all employees, officers and directors of Orca Security and its subsidiaries. It includes a dedicated section on anti-slavery and human trafficking, which states that we do not engage in or support child labour, human trafficking or slavery, that we expect the same of our suppliers, and that we do not support companies known to use any of these practices. The Code also requires everyone to be treated with dignity and respect, and commits us to paying at least the minimum wage required by law.

● Whistleblower Policy, which allows employees, contractors, suppliers and other third parties to raise concerns, including concerns about human rights and modern slavery, and protects those who raise concerns from retaliation.

● Recruitment and employment practices. We do not charge candidates fees for recruitment, we do not retain employees’ identity documents, and our employees receive written terms of employment and may end their employment by giving notice in accordance with applicable law.

Assessing Modern Slavery Risks

In preparing this statement, our Legal and Compliance functions carried out an initial assessment of modern slavery risk across our operations and supply chains, with reference to the UK Home Office statutory guidance on transparency in supply chains.

Our own operations. Most of our workforce consists of skilled, salaried professionals employed under written contracts in countries with established labour laws. We consider the risk of modern slavery within our directly employed workforce to be low.

Our supply chains. Our assessment identified the following as the areas of our supply chains with the highest relative risk: the manufacture of electronic hardware and the extraction of the minerals used in it, including in the infrastructure of our cloud providers; branded merchandise; facilities services at our offices; labour intermediaries; and events, travel and hospitality.

Due Diligence and Actions Taken

During the Reporting Period we had the following measures in place:

● Supplier onboarding. New suppliers are approved through our procurement approval process, which includes sanctions screening and Legal review of contract terms.

● Contract terms. Where we contract on our own terms, our supplier agreements require compliance with applicable laws, including laws prohibiting modern slavery and human trafficking.

● Labour providers. We engage recruitment agencies, employer of record providers and staff augmentation providers under written agreements that require compliance with applicable employment law.

● Our employees. We verify the right to work of our employees in accordance with local law, and our employment terms are reviewed by our People and Legal teams for compliance with local employment law.

Remediation. If we identify modern slavery in our operations or supply chains, we will take appropriate action.

Reporting Concerns

Anyone, inside or outside Orca Security, may raise a concern about possible modern slavery in our business or supply chains:

● through the reporting channels set out in our Whistleblower Policy;

● by email to legal@orca.security; or

● in the United Kingdom, through the Modern Slavery and Exploitation Helpline on 08000 121 700.

If a person is in immediate danger, the local emergency services should be contacted. We will not tolerate retaliation against anyone who raises a concern in good faith.

Assessing Effectiveness

No reports or instances of modern slavery in our operations or supply chains were identified during the Reporting Period. We recognise that this does not, on its own, show that modern slavery is absent.

We will keep our approach under review as our business and supply chains develop.

Approval

This statement was approved by the Board of Directors of Orca Security Ltd. on November 10, 2026.